17 September 2020

138 results · Feed

• Unscored —
  CVE-2020-0381 Public exploit

  In Parse_wave of eas_mdls.c, there is a possible out of bounds write due to an integer overflow. This could lead to rem…

  Android
  Sep 17, 2020
• Unscored —
  CVE-2020-0379

  In the Bluetooth service, there is a possible spoofing attack due to a logic error. This could lead to remote informati…

  Android
  Sep 17, 2020
• Unscored —
  CVE-2020-0123

  There is a possible out of bounds write due to an incorrect bounds check.Product: AndroidVersions: Android SoCAndroid I…

  Android
  Sep 17, 2020
• Unscored —
  CVE-2020-0380 Public exploit

  In allocExcessBits of bitalloc.c, there is a possible out of bounds write due to an incorrect bounds check. This could …

  Android
  Sep 17, 2020
• Unscored —
  CVE-2020-0074

  In verifyIntentFiltersIfNeeded of PackageManagerService.java, there is a possible settings bypass allowing an app to be…

  Android
  Sep 17, 2020
• Unscored —
  CVE-2020-0404

  In uvc_scan_chain_forward of uvc_driver.c, there is a possible linked list corruption due to an unusual root cause. Thi…

  linux-raspi2 linux-hwe linux-azure linux-riscv Android Debian Ubuntu
  Sep 17, 2020
• Medium 5.3
  CVE-2020-14338

  Improper Input Validation in Xerces

  A flaw was found in Wildfly's implementation of Xerces, specifically in the way the XMLSchemaValidator class in the JAXP component of Wildfly enforced the "use-grammar-pool-only" feature. This flaw allows a specially-crafted XML file to manipulate the validat…

  xerces:xercesImpl Maven
  Sep 17, 2020
• Medium 6.1
  CVE-2020-13944 EPSS 25%

  Apache Airflow Cross-site Scripting

  In Apache Airflow < 1.10.12, the "origin" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit.

  apache-airflow PyPI
  Sep 17, 2020
• High 8.8
  CVE-2020-13948

  Apache Superset OS Command Injection

  While investigating a bug report on Apache Superset, it was determined that an authenticated user could craft requests via a number of templated text fields in the product that would allow arbitrary access to Python’s `os` package in the web application proce…

  apache-superset PyPI
  Sep 17, 2020
• High 8.8
  CVE-2020-6113 EPSS 64%

  An exploitable vulnerability exists in the object stream parsing functionality of Nitro Software, Inc.’s Nitro Pro 13.1…

  Sep 17, 2020
• High 8.8
  CVE-2020-6112 EPSS 17%

  An exploitable code execution vulnerability exists in the JPEG2000 Stripe Decoding functionality of Nitro Software, Inc…

  Sep 17, 2020
• High 8.8
  CVE-2020-6115

  An exploitable vulnerability exists in the cross-reference table repairing functionality of Nitro Software, Inc.’s Nitr…

  Sep 17, 2020
• High 8.8
  CVE-2020-6116 EPSS 28%

  An arbitrary code execution vulnerability exists in the rendering functionality of Nitro Software, Inc.’s Nitro Pro 13.…

  Sep 17, 2020
• Critical 9.3
  CVE-2020-8028

  salt-api is accessible to every user on SUSE Manager Server

  A Improper Access Control vulnerability in the configuration of salt of SUSE Linux Enterprise Module for SUSE Manager Server 4.1, SUSE Manager Proxy 4.0, SUSE Manager Retail Branch Server 4.0, SUSE Manager Server 3.2, SUSE Manager Server 4.0 allows local user…

  SUSE SUSE Manager Server 4.0 SUSE Manager Server 3.2 SUSE Linux Enterprise Module for SUSE Manager Server 4.1 Linux
  Sep 17, 2020
• Unscored —
  CVE-2020-14181 Public exploit Scanner template EPSS 100%

  Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Info…

  Atlassian Jira Server Web / CMS
  Sep 17, 2020
• Unscored —
  CVE-2020-0427

  In create_pinctrl of core.c, there is a possible out of bounds read due to a use after free. This could lead to local i…

  linux-raspi2 linux-hwe linux-azure linux-riscv Android Debian Ubuntu
  Sep 17, 2020
• Unscored —
  CVE-2020-25215

  yWorks yEd Desktop before 3.20.1 allows XXE attacks via an XML or GraphML document.

  Sep 17, 2020
• Unscored —
  CVE-2020-25216

  yWorks yEd Desktop before 3.20.1 allows code execution via an XSL Transformation when using an XML file in conjunction …

  Sep 17, 2020